Privacy Notice

Version 2026-11-06. Issued under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

This notice explains what personal data Indian Brand (“we”) collects when you use indianbrand.in, why, who we share it with, how long we keep it, and how you can control it. We act as the “Data Fiduciary” for this data. We only collect what we need for the purposes below, and we do not sell your personal data.

1. What we collect and why

Personal data	Why we use it
Name, email address, mobile number, password (stored only as a one-way hash)	To create and run your account, sign you in and send one-time codes.
Delivery and billing addresses	To deliver your orders and print invoices.
Orders, payments status, returns and refunds	To sell and deliver what you buy, handle returns and refunds, and keep the records tax law requires. We never receive your card number, CVV or UPI PIN: the payment gateway handles them.
Reviews, questions, messages to sellers and complaints	To publish your reviews, pass your messages to the seller, and resolve complaints.
Wishlist, cart, shops you follow, wallet and reward points	To provide those features in your account.
Your browsing mode and recently viewed products (kept in your browser)	To show listings the way you chose and suggest products you looked at.
Anonymous analytics id and Google Analytics (only if you allow them)	To count which products are viewed, so we can improve the catalogue. We store only a scrambled form of the id, never your IP address, with these events.
Technical logs (IP address, browser, time of request)	To keep the site secure, detect misuse and investigate incidents. Kept for one year, as the DPDP Rules require.
Marketing preference (only if you opt in)	To send offers and new-launch news. You can switch this off at any time.

We use your data on the basis of your consent, given when you create an account or allow analytics, and, when you place an order, because you gave the data for that order (Section 7(a) of the Act). We do not use your data for any other purpose without asking you first.

2. Who we share it with

Sellers on IndianBrand: Name, delivery address and phone for the orders they fulfil.
Courier and delivery partners: Name, delivery address and phone to deliver your order.
Payment gateways: Order amount and the details you enter on the payment page. We never see or store your card or UPI PIN.
Email and SMS providers: Your email or phone number to send one-time codes and order updates.
Hosting and backup provider: All data we hold is stored on our servers, encrypted in transit.
Government and law enforcement: only when the law requires us to.

Everyone we share data with may use it only to do that job for us, and must protect it.

3. How long we keep it

Account, addresses, wishlist, cart and preferences: while your account is open. When you delete your account, we erase them within 90 days.
Orders, invoices and payment records: up to 8 years, because tax and company law require us to keep them. After you delete your account these records are no longer linked to your name in your account.
Complaints: 3 years after they are closed.
Technical logs: one year, then deleted.
Analytics events: kept without your name or IP address.

4. Your rights

Under the DPDP Act you can:

See your data: a summary of what we hold, who we share it with, and a full copy you can download.
Correct or update it: edit your profile and addresses in your account.
Delete your account and data, except records the law makes us keep.
Withdraw consent for marketing or analytics at any time, as easily as you gave it. Withdrawing doesn't affect what we did before.
Nominate someone to use these rights for you if you die or become unable to.
Complain to us, and then to the Data Protection Board of India.

Signed in? Go to Privacy & my data. Otherwise, write to the contact below. We reply to every request within 90 days.

5. Cookies

Essential (always on): sign-in session, cart, language, browsing mode, display pattern, recently viewed products, and your cookie choice.
Analytics (only if you allow): an anonymous visitor id (ib_vid) and Google Analytics, when it is turned on.

We don't use advertising or tracking cookies from social networks. lets you change your choice at any time.

6. Children

IndianBrand is for adults. You must be 18 or older to create an account. We do not knowingly collect children's data, track children, or show them targeted advertising. If you believe a child has an account, tell us and we will delete it.

7. Security and data breaches

We protect your data with encrypted connections (HTTPS), hashed passwords, access limited to staff who need it, and backups. If a breach affects your personal data, we will tell you without delay: what happened, what it may mean for you, what we are doing about it and what you can do. We will also report it to the Data Protection Board.

8. Contact and complaints

Grievance Officer (also handles privacy requests)

Email: support@indianbrand.in

Phone: +919703131442

Address: 12-2-422/6 Vijaya Apartments, Priya Colony, Mehdipatnam, Hyderabad

You can also use the complaint form and choose “Personal data or privacy”.

We answer privacy complaints within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.

9. Changes and languages

If we change this notice in a way that matters, we will show you the new version and ask you to accept it the next time you sign in. You can ask for this notice in English or any language in the Eighth Schedule to the Constitution of India by writing to the contact above.